This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft File: Dh8fRS7maY6Z38tOP1rus7wlA4U.mft (raw, json) Hash identifier: 5zjqPjHzax4++sbERLbNOdhMNkXKw/4NRuSo1WGHJJE= Subject key identifier: 36:32:4C:20:85:21:41:9B:70:5B:46:D6:86:AF:1F:CD:47:92:5F:0D Authority key identifier: 0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85 Certificate issuer: /CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385 Certificate serial: 019B6655C63649E3EC6310496CE2851E8C20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft Manifest number: 1198 Signing time: Sun 28 Dec 2025 19:00:55 +0000 Manifest this update: Sun 28 Dec 2025 19:00:55 +0000 Manifest next update: Mon 29 Dec 2025 19:00:55 +0000 Files and hashes: 1: 69j8k9W_Kz202mE3W0ylnRGyMyQ.roa (hash: VQv9gDwWX0bKpqI6qovNd6HvrIeep8UuZ4eE64gS7zI=) 2: Dh8fRS7maY6Z38tOP1rus7wlA4U.crl (hash: scceA+7MQEOSFEY2svlXHYGcxvUeue2KJEP5WcVUWvM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:55:c6:36:49:e3:ec:63:10:49:6c:e2:85:1e:8c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385 Validity Not Before: Dec 28 19:00:55 2025 GMT Not After : Dec 29 19:00:55 2025 GMT Subject: CN=36324c208521419b705b46d686af1fcd47925f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e1:d2:bd:10:be:95:c9:82:1d:50:dd:4d:f0: e6:15:08:2f:72:f4:5d:4c:e2:85:8e:57:4b:da:c5: cf:a0:d8:d3:28:70:d1:df:57:11:75:12:02:34:09: 34:4a:72:1e:27:b7:42:65:c6:37:3a:c2:47:47:b0: f0:1a:ea:80:7d:65:1f:6a:e6:11:9b:e9:e5:b0:13: cb:14:53:c5:f5:d8:9c:00:85:ac:45:f4:8c:58:df: 4c:57:ce:5a:ea:2e:05:aa:af:ca:30:d3:19:c6:81: e9:99:78:cd:92:9d:e5:ce:f2:b7:12:b2:a7:20:a0: 85:78:c6:68:ab:e6:03:a5:16:66:93:2c:13:92:3f: f2:d3:fa:a1:af:17:49:90:32:65:59:28:e2:84:58: a1:63:ba:56:cb:14:8a:b8:a1:ad:2d:bb:49:19:9b: 00:d4:f2:1b:d6:80:bc:cb:78:96:cb:11:46:04:fe: 45:d9:b7:ec:55:1e:a1:85:f7:f5:37:07:a2:7d:86: c6:9a:b5:3b:01:29:bf:49:a6:bb:bd:f1:2a:4d:1a: 5a:7c:e2:b8:56:92:4f:de:cb:57:48:dd:82:54:7c: 77:62:af:cc:f9:8f:46:91:c2:16:3b:c1:82:c3:8e: fc:a4:14:1b:ea:90:8f:18:7f:d2:cd:48:27:71:98: 8d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:32:4C:20:85:21:41:9B:70:5B:46:D6:86:AF:1F:CD:47:92:5F:0D X509v3 Authority Key Identifier: keyid:0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d8:72:c8:06:ff:e1:f2:ae:2c:ef:4e:bb:08:ea:c5:31:60: 59:95:3b:9e:0f:36:1a:98:7f:b3:d8:bb:fd:60:0d:8a:37:8b: 75:92:19:37:90:d8:00:e3:d1:75:fe:bf:93:ca:c8:8a:b8:28: ff:93:6e:8f:dc:23:41:0c:0f:fb:bb:57:fb:15:cc:40:93:87: 6c:d2:46:9b:dd:fd:28:9a:56:54:99:b5:94:ca:93:24:9b:e4: 28:5a:48:84:28:44:69:e6:ad:d6:07:d8:51:c6:78:94:48:1f: 5c:40:08:11:b0:76:eb:83:e0:4d:6d:c8:43:bc:ab:62:e1:62: 32:9b:71:48:b3:01:07:f5:11:c8:27:8d:33:5a:5d:54:7e:f2: 51:79:27:07:32:50:13:f5:2c:a3:2a:a6:3f:fa:69:ed:6f:80: 09:27:f9:c0:64:6e:a8:b5:fd:a1:71:d5:f4:e8:83:ab:bf:ee: 23:bf:92:9b:4d:da:ee:7e:53:e7:6d:5f:a5:92:c1:0e:38:29: bb:af:dd:31:33:8a:ae:3b:14:b8:48:05:04:f0:7c:41:6d:aa: 2c:41:b4:06:f7:ad:00:d8:30:b7:58:8a:b3:04:8f:de:33:34: f5:eb:21:3b:eb:1c:ed:be:dc:52:e3:1b:f5:9f:74:9c:cb:e8: bd:7a:c7:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmVcY2SePsYxBJbOKFHowgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMWYxZjQ1MmVlNjY5OGU5OWRmY2I0ZTNmNWFlZWIzYmMy NTAzODUwHhcNMjUxMjI4MTkwMDU1WhcNMjUxMjI5MTkwMDU1WjAzMTEwLwYDVQQD EygzNjMyNGMyMDg1MjE0MTliNzA1YjQ2ZDY4NmFmMWZjZDQ3OTI1ZjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOHSvRC+lcmCHVDdTfDmFQgvcvRd TOKFjldL2sXPoNjTKHDR31cRdRICNAk0SnIeJ7dCZcY3OsJHR7DwGuqAfWUfauYR m+nlsBPLFFPF9dicAIWsRfSMWN9MV85a6i4Fqq/KMNMZxoHpmXjNkp3lzvK3ErKn IKCFeMZoq+YDpRZmkywTkj/y0/qhrxdJkDJlWSjihFihY7pWyxSKuKGtLbtJGZsA 1PIb1oC8y3iWyxFGBP5F2bfsVR6hhff1NweifYbGmrU7ASm/Saa7vfEqTRpafOK4 VpJP3stXSN2CVHx3Yq/M+Y9GkcIWO8GCw478pBQb6pCPGH/SzUgncZiNNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYyTCCFIUGbcFtG1oavH81Hkl8NMB8GA1UdIwQY MBaAFA4fH0Uu5mmOmd/LTj9a7rO8JQOFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGg4ZlJTN21hWTZaMzh0T1AxcnVzN3dsQTRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC84MGY3NGUtYzlkNS00YWEzLWJhZDct YjE5ZmJhMDNjMDZmLzEvRGg4ZlJTN21hWTZaMzh0T1AxcnVzN3dsQTRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC84MGY3NGUtYzlkNS00YWEzLWJhZDctYjE5ZmJhMDNjMDZm LzEvRGg4ZlJTN21hWTZaMzh0T1AxcnVzN3dsQTRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj9hyyAb/ 4fKuLO9OuwjqxTFgWZU7ng82Gph/s9i7/WANijeLdZIZN5DYAOPRdf6/k8rIirgo /5Nuj9wjQQwP+7tX+xXMQJOHbNJGm939KJpWVJm1lMqTJJvkKFpIhChEaeat1gfY UcZ4lEgfXEAIEbB264PgTW3IQ7yrYuFiMptxSLMBB/URyCeNM1pdVH7yUXknBzJQ E/UsoyqmP/pp7W+ACSf5wGRuqLX9oXHV9OiDq7/uI7+Sm03a7n5T521fpZLBDjgp u6/dMTOKrjsUuEgFBPB8QW2qLEG0BvetANgwt1iKswSP3jM09eshO+sc7b7cUuMb 9Z90nMvovXrH5w== -----END CERTIFICATE-----Generated at Sun Dec 28 20:28:35 2025 by rpki-client